SQL injection vulnerability in the ossim-framework service in AlienVault OSSIM before 4.6.0 allows remote attackers to execute arbitrary SQL commands via the ws_data parameter.
oryginał ENCVSS Vector
AV:N/AC:L/Au:N/C:P/I:P/A:PAlienvault Open Source Security Information Management
APPAlienvault1.0.41.0.62.12.1.22.1.52.1.5-12.1.5-22.1.5-33.13.1.103.1.123.1.94.04.0.34.0.4+ 12 więcej
🟢
PATCH DOSTĘPNY
Aktualizacja od producenta gotowa. Wdrożenie w ramach standardowego cyklu.
Tagi
SQLi
CWE
Powiązane podatności
CVE-2018-7279CRITICAL9.8ten sam produkt
A remote code execution issue was discovered in AlienVault USM and OSSIM before 5.5.1.
CVE-2013-6056HIGH7.5ten sam produkt
OSSIM before 4.3.3.1 has tele_compress.php path traversal vulnerability
CVE-2015-4046HIGH7.2ten sam produkt
The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbi...
CVE-2014-5158HIGH10.0ten sam produkt
The (1) av-centerd SOAP service and (2) backup command in the ossim-framework service in AlienVault OSSIM befo...
CVE-2014-5210HIGH10.0ten sam produkt
The av-centerd SOAP service in AlienVault OSSIM before 4.7.0 allows remote attackers to execute arbitrary comm...